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SYMBOLIC ARITHMETIC AND INTEGER FACTORIZATION 



SAMUEL J. LOMONACO 



C _ ) Abstract. In this paper, we create a systematic and automatic procedure for 

f\J , transforming the integer factorization problem into the problem of solving a 

system of Boolean equations. Surprisingly, the resulting system of Boolean 
Q equations takes on a "life of its own" and becomes a new type of integer, which 

^^ i we call a generic integer. 

^^ , We then proceed to use the newly found algebraic structure of the ring of 

VO ■ generic integers to create two new integer factoring algorithms, called re- 

spectively the Boolean factoring (BF) algorithm, and the multiplicative 
Boolean factoring (MBF) algorithm. Although these two algorithms are 
pH , not competitive with current classical integer factoring algorithms, it is hoped 

*~^T • that they will become stepping stones to creating much faster and more com- 

^ ; ' petitive algorithms, and perhaps be precursors of a new quantum algorithm 

C^ ' for integer factoring. 
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1. Introduction 



This paper is the result of a research program seeking to gain a better quali- 
tative and quantitative understanding of the computational complexity of integer 
factorization. By the phrase "computational complexity" is meant the Boolean 
complexity, i.e., the minimum number of fundamental Boolean operations re- 
quired to factor an integer, as a function of integer size. The strategy chosen for 
accomplishing this research objective was to develop a systematic and automatic 
procedure for the decomposition of arithmetic operations into Boolean operations. 

The results of this endeavor produced unanticipated results. As expected, what 
resulted was a conversion of the problem of integer factoring into the problem of 
solving a system of Boolean equations. But these resulting systems of Boolean 
equations unexpectedly took on a "life of their own," and became a new type of 
integer in their own right. We call this new type of integer a generic integer, and 
the corresponding algebraic object G(x), the ring of generic integers. Such a 
ring is a fascinating mix of characteristic and characteristic 2 algebraic structure. 

Yet another surprise was that this symbolic approach to integer factoring natu- 
rally led to the larger context of the ring of dyadic integers Z( 2 ) , and then on to 
the corresponding ring of generic dyadic integers G( 2 ) (%)■ The advantage of 
looking at integer factorization within the larger context of the dyadics is that every 
odd (generic) integer dyadic has a (generic) dyadic integer inverse. This naturally 
led to the creation of the (generic) lopsided division algorithm for computing 
inverses of odd integers in the dyadic integers Z( 2 ) (in the generic dyadic integers 
G(2) (i))- 

This in turn led to the creation of the Boolean factoring (BF) algorithm, 

which systematically and automatically translates the problem of factoring an in- 
teger N into the problem of solving a system of Boolean equations. These Boolean 
equations were obtained by using generic lopsided division to divide the integer N 
by carefully chosen odd generic integer x. The sought system of Boolean equations 
is simply the generic remainder resulting from this division. 

Next it is noted that the generic inverse x~ l of x need only be computed once, 
and then used over and over again. This immediately leads to the creation of 
a second factoring algorithm, the multiplicative Boolean factoring (MBF) 
algorithm, which simply computes the generic product 

N -x- 1 , 

to produce the system of Boolean equations to be solved. 

A general framework (i.e., scarce satisfiability) for solving the system of Boolean 
equations produced by the BF and MBF algorithms is then discussed. This frame- 
work was later used by Gamal Abdali to create a LISP implementation of the BF 
algorithm. Sumeet Bagde then extended these methods by using binary decision 
diagrams (BDDs)[2] to create a Mathematica program that also implemented the 
BF algorithm. 
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Both the LISP and Mathcmatica programs were used to factor a large number of 
integers. The runtime statistics indicated that the BF algorithm runs in exponen- 
tial time, and hence, is not competitive with the best classical factoring algorithms. 
For an algebraic basis as to why this is the case, we refer the reader to the topdown 
overview given toward the end of this paper. 

Open questions and future possible research directions are discussed in the con- 
clusion of this paper. Connections with the satisfiability problem are also discussed. 



2. Lopsided division 

Let Z( 2 ) denote the ring of dyadic integers, and let Z denote its subring of all 
rational integers (i.e., its subring of all standard integers.) 

Given below are examples of the dyadic expansion of some rational integers. 
Please note that the dyadic expansion of a non-negative rational integer is the 
conventional radix 2 expansion. The dyadic expansion of a negative rational integer 
is an "infinite 2's complement" of the radix 2 expansion of its absolute value. 

5 = ... 00101 



4 = 


... 00100 


3 = 


... 00011 


2 = 


. . . 00010 


1 = 


. . . 00001 



= ... 00000 



-1 = 


... 11111 


-2 = 


... 11110 


-3 = 


... 11101 


-4 = 


... 11100 


-5 = 


... 11011 



Every odd dyadic integer is a unit in the ring of dyadic integers Z( 2 ) , i.e., given 
any odd dyadic integer a , there exists a unique dyadic integer a -1 such that 



a ■ a =1 



Thus, 
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Proposition 1. Let b be an odd dyadic integer, and let a be an arbitrary dyadic 
integer. Then a divided by b , written 

a/b 

is also a dyadic integer. 



Corollary 1. Let b be an odd rational integer, and let a be an arbitrary rational 
integer. Then a divided by b , written 

a/b 

is a well defined dyadic integer. Moreover, the dyadic integer a/b is a rational 
integer if and only if b is an exact divisor of a in the ring of rational integers Z. 



Definition 1. Let 

be a sequence of dyadic integers, and let 



, a^ , a« , o<°> 



(») 

denote the j-th bit of the dyadic expansion of (v- 1 ' . Then the sequence 

... , a^ , aV , a <°) 

is said to be convergent provided for each j > there exists a non-negative integer 
n = n(j) such that 

cr- = a6™ for i > n(j). 

Otherwise, the sequence is said to be divergent. If the above sequence is convergent, 
its limit, written 

lira a^ 

i— 7-oc 

is said to exist, and is defined as the dyadic integer with dyadic expansion given by 

flimaW) =a$ n °' )) . 



Remark 1. The above limit is the standard limit in the valuation topology. 



Definition 2. Let a be a dyadic integer with dyadic expansion 

■ ■ ■ , 0-1 , 0-1 , o-o 

Then let 

S : Z( 2 ) — > Z( 2 ) 
denote a left shift by 1 bit, i.e., 

Sa = . . . , 02 , ffli , fflo > 
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Remark 2. Hence, Sa is the same as a multiplied by the dyadic 

2 = ... 00010 



Definition 3. Let a, b, and c be dyadic integers with dyadic expansions 

...,02,01,00 

... , b2 , h , bo 

■ • ■ , C 2 , Ci , Co 

respectively. Define the first bitwise symmetric function of a, b, c, written 

Bitwise_ai(a,b,c) , 

as the dyadic with i-th bit given by 

o-i(oi,&i,c») = at + b % + a 

where "+" denotes the exclusive "or" binary operation. Define the second bitwise 
symmetric function of a, b, c, written 

Bitwise Jj2{a,b,c) , 

as the dyadic with i-th bit given by 

(72(Oi,6j,Cj) = (fl. Oh) + (6»OCj) + (CjOOj) , 

where "+" again denotes exclusive "or" and "o" denotes logical "and" . 

We are now ready to define an algorithm called lopsided division. 

Theorem 1. Let b be an odd dyadic integer, and let a be an arbitrary dyadic 
integer, with dyadic expansions 

■ ■ ■ , &2 , h , b 

•j 

■ ■ ■ , 02 , Ol , Oo 

respectively (where bo = 1.) Let 

c(°) = a 

borrows^ ' = 
and 

c( ,+1 ) = Bitwisejn ( cW ,borrows^ , cf' oS l b 1 

6orrows^ +1 ' = S ■ Bitwisejj2 ( c*- 4 -** ,borrows^ 1 ' , cf o S l b ) 

where &■*'* denotes the complement of c^ , i.e., 

c«* = 1 + c (i) /or j > 
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(i) 

where '+ ' denotes exclusive "or", and where c\ o S l b denotes the bitwise logical 



"and", i.e., 

Then the sequences c-' 1 ' and borrows^ 1 ' are convergent, converging respectively to: 

lim c^ = a/b 

i— >OG 

lim borrows^ 1 ' = 

i— >oo 

This algorithm for computing a/b is called lopsided division. 



Remark 3. Please note that this is an algorithm in the sense that 

(a/b), = cf 



Definition 4. Let a be a positive integer. The length of a, written 

lgth(a) , 

is defined as 

lgth(a) = j + 1 
where j is the largest non-negative integer such that a,j = 1 . 



Corollary 2. Let b be a positive odd rational integer, and let a be an arbitrary 
positive rational integer. Let 

T = 1 + lgth(a) - lgth(b) 

Then b is an exact divisor of a if and only if 

c' ' = borrows^ ' 

If b is an exact divisor of a, then the radix 2 expansion of a/b is 

a/b = c ri c r _ 2 ••• c x c 



Example 1. Lopsided division of a = 209 by b — 19 . The radix 2 representations 
of 209 and 19 are respectively: 

a = 11010001 
b = 10011 
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The lopsided division of 209 by 19 is given in the tableau below: 











J3) _(2) 
c 3 c 2 


c (1) 


c (0) 












1 


1 


1 


a/b 


a= 1 


1 





1 








1 


| 10011 = b 








1 





1 


1 


c ( ^oS°b 










1 





■ C (D 











1 






borrows*- 1 ' 






1 





1 


1 




c^oS'b 






1 













' c (2) 




1 






1 






borrows*^ 2 ' 




















4 2) o5 2 6 







1 





1 






c (3) 









1 








borrows*- 3 ' 


1 








1 


1 






4 3) o5 3 6 








1 

1 












c (4) 

borrows 1 - 4 ' 


Please note that 


















1 + lgth(209) - 


- lgth(19) 


= 


1 + 8 


-5 = 4 












and 







44) 



borrows 1 - 4 ' 



Hence, 19 is an exact divisor of 209, and 

209/19 = 11 (base 10) = 10011 (base 2) 



Example 2. Lopsided division of 209 by 21. 

J3) (2) (1) 



JO) 



1 







1 



c^'o<S°& 











1 













1 
































1 





1 





1 













1 










1 








1 





1 





1 












1 


Please note that 











1 + lgth(209) - lgth(21) 



a/b 
10101 = 6 

,(o) 

C (D 
borrows*- 1 ' 

c^oS'b 

c (2) 

borrows^ 

J 2 ) 

c (3) 

borrows 1 - 3 ' 
4 3) o5 3 fe 

c (4) 

borrows* 4 ' 



c* 2 ' oS 2 b 



44) 



^ borrows*- 4 ' 
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Hence, a/b = 209/21 is not a rational integer, and b = 21 is not an exact divisor 
of a = 209. So 

1101 (base 2) ± [209/21J 



Example 3. Lopsided division of 209 by 17. 











c (3) 



c (2) 






c (0) 

1 


a/b 


1 


1 





1 











1 


| 10001 = b 









1 











1 


4 0) o5°6 



















c (i) 
borrows^ 1 ' 
























^oSH 





















' C ( 2 ) 

borrows^ 2 ' 







1 






















4 2) o5 2 6 

c (3) 

borrows^ 3 ' 




1 




1 




















4 3) o5 3 6 

c (4) 

borrows^ 4 ' 



Please note that 



1 + lgth(209) - lgth(17) = 1 + 8-5 = 4 

and 
c*- 4 ) ^ borrows*- 4 ' 



Hence, 17 is not an exact divisor of 209. 
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Example 4. Lopsided division o/513 by 27. 



o= 1 



„(5) (4) (3) „(2) (1) 







1 










































1 


1 


1 












1 


1 

































1 





1 


1 









1 
















1 


1 





1 


1 

























1 






































1 



.,(<') 





1 


1 





1 





1 


1 




1 






1 


1 





1 


1 





a/b 
11011 = b 

c^oS°b 

C (D 

borrows^ 1 ' 

c^oS'b 

c (2) 

borrows^ 2 ' 

,(2), 
c (3) 

borrows^ 3 ' 

,(3), 
c (4) 

borrows^ 4 ' 
c^oS 4 b 

c (5) 

borrows^ 5 ' 
4 5) o5 5 6 

c (6) 

borrows 1 ' 6 ' 



r., ' o<S 2 & 



cv «<S 3 & 



Please note that 

1 + lgth(513) - lgth(27) 



1 + 10-5 = 6 
and 
= borrows 1 ' 6 ' 



Hence, 27 is an exact divisor of 513 . Moreover 

513/27 = 19 = 10011 (base 2) 



3. Generic arithmetic: "Algebraic parallel processing" 

We now lift the algebraic operations on the ring of rational integers Z and on the 
ring of dyadics integers Z( 2 ) to the generic level by creating respectively the ring 
G (x) of generic rational integers and the ring G( 2 ) (x) of generic dyadic integers. 
It will then be observed that each arithmetic operation in these generic rings, G (x) 
and G(2) (x), is equivalent to performing many simultaneous arithmetic operations 
in the corresponding respective rings of rational integers Z and dyadic integers Z( 2 ) . 
This is what is meant by the phrase "algebraic parallel processing." (Please refer 
to section 7 for a topdown overview.) 
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Definition 5. A Boolean ring B (with addition denoted by "+" and with mul- 
tiplication denoted by "o " ) is a ring with multiplicative identity, denoted by "1 ", 
such that each element a o/B is an idempotent, i.e., such that 

a = a. 

It follows that B is a commutative ring, and that each element a o/B is its own 
additive inverse, i.e., 

a -j- a = 0, 

where "0 " denotes the additive identity of B . The additive operation will often be 
referred to as exclusive "or" and the multiplicative operation "o" will often be 
referred to as logical "and". The complement of an element a o/B , written a* , 
is defined as 

a* = 1 + a. 



Definition 6. Let v be an arbitrary but fixed non-negative integer. Let 

X u -i,...,X 2 ,Xl,Xo 

denote a finite sequence of v distinct symbols, let x denote the set of these symbols, 
and let 

B(x) 

denote the free Boolean ring on the symbols in x . The elements of x are called 
the free basis elements of B < x > and x is called the free basis of B < x > . 



Remark 4. Thus, B ( } denotes the free Boolean ring on the empty free basis. 
Hence, B ( } may be identified with the field of two elements ¥2 ■ 



A generic dyadic integer e is a an infinite sequence 

e = . .., e 2 , ei, e 
of elements a of B (x) . If there exists an integer k such that 

for all i > k , then e is called a generic rational integer. 

Let 

G( 2 ) = G(2) ( x > = G(2) (x v -i, • • ■ , X 2 , Xl, Xo) 

and 

G = G (x) = G (x v -i, ... , X2, xi, x ) 
denote respectively the set of all generic dyadic integers and the set of all generic 
rational integers. 

The generic integers 

= ...,0,0,0,0 

1 = ...,0,0,0,1 
will be called zero and one, respectively. 
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Remark 5. Please note that the dyadic integers and the rational integers lie in the 
set of generic dyadic integers and the set of generic rational integers, respectively. 



Definition 7. A generic integer e such that 

e, = 1 

for almost all i will be said to be negative. A generic integer e not equal such 
that 

e t = 

for almost all i will be said to be positive. The generic integer e will be said to be 
non-negative if e is either or positive. 



Remark 6. Please note that there are generic rational integers which are neither 
positive nor negative nor non-negative. 



Let a and b be generic dyadic integers. The component-wise exclusive "or" 

of a and b , written a -j- b , is defined as: 

a + b = ... , a 2 + b 2 , ai + bi, a + b Q 

where a, + &« denotes the exclusive "or" of the i-th components of a and b . 
The component-wise logical "and" of a and b , written aob, is defined as: 

aob = ... , 02*62, fli o bi , oq o 6q 

where otj o bi denotes the logical "and" of the i-th components of a and b . 
The component-wise complement of a , written a* , is defined as: 

a* = ... , 02, a*, Oq 

where a* denotes the complement of the i-th component of a . 

Let a be an element of the free Boolean ring B (x) . Then the scalar product 

of a and a , written aoa, is defined as 

a o a = ... , a«fl2, aoai, ao oq 7 

where a o aj denotes the logical "and" of a and the i-th component of a . 
The unit left shift of a , written Sa, is defined as: 

Sa = ..., a2, 01, do, 0. 

Let 

...,e( 2 \ e«, e(°) 

be an infinite sequence of elements of G(2) (x). If for every j > 0, there exists a 
non-negative integer n(j) such that 

ef = ej" 0)) for i > n(j) 
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then the sequence is said to be convergent. Otherwise, it is said to be divergent. 
If the above sequence is convergent, its limit, written 

lim e (i) 

i—>oo 

is said to exist, and is defined as the generic dyadic integer 
limeW=...,4 n < 2 », e™ 1 ", 4" (0)) 



Definition 8. An instantiation is a mapping 

$ :x — >M( ) , 

where B ( ) denotes the free Boolean ring on the empty set of symbols. Hence, B ( ) 
may be identified with the field of two elements F2 . Since B (x) is free on x , every 
instantiation uniquely and naturally extends to a Boolean ring epimorphism 

$ : B (x) — >M() 

which again is called an instantiation. Moreover, each instantiation uniquely 
extends to epimorphisms: 

$ : G (x) — > Z 

$ : G (2) (x) — ► Z (2) 
which are also called instantiations. 



The following will be helpful in proving theorems: 

The Principle of Instantiation. 

al): Let a and b be elements of B (x). If for every instantiation $ , 

$(a) = $(b) , 
then a = b. 

a2): Let $ and fi be instantiations. If for every element a of B < x >, 

$(a) = fl{a) , 
then $ = O. 

bl): Let a and b be generic dyadic integers. If for every instantiation $, 

$(a) = $(b) , 
then a = b. 

b2): Let $ and fi be instantiations. If for every generic dyadic integer a, , 

$(a) = Q(a) 
then $ = Q. 
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Finally, G (x) and G(2) (x) can now be made into commutative rings by defining 
two binary operations, addition "+" and multiplication "•" , as follows: 



Definition 9 (of addition "+"). Let a and b be generic dyadic integers. Let 

c(°) = a 

carries 1 - ^ = b 

and let 

c (*+i) _ c (i) _j_ carries^ 1 ' 

carries^ +1 ' — S (c'*' o carries^') 

Then the sequences o- 1 ' and carries^ 1 ' are convergent. The generic dyadic integer 
a + b is defined as: 

a + b = lim c % ' 

i— 7-oc 

It can also be shown that 

lim carries^ 1 ' = 

i— 7-oc 

Moreover, if a and b are generic rational integers, then a + b is also a generic 
rational integer. 



Definition 10 (of multiplication). Let a and b be generic dyadic integers. The 
product of a and b , written a ■ b, is defined as: 

oo oo 

a ■ b = V^ b % o (S l a) = V^o, o (S l b) , 

i=o i=a 

where "X^ " denotes 'Tinij_ 5 . 00 X^=o "> an< ^ "S " denotes a sum using the opera- 
tion "+ " defined above. 



Remark 7. Generic integer multiplication "■ " was defined above in terms of the 
secondary operation of generic integer addition "+ ". Please refer to the appendix 
for a definition of generic integer multiplication "■ " in terms of more fundamental 
Boolean operations. 



Generic division "/" will be defined in the next section. 
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4. Generic lopsided division and the Boolean factoring (BF) 

ALGORITHM 

One of the objectives of this paper is to lift the algebraic structure (i.e., the 
fundamental binary operations) of the rational integers Z and the dyadic integers 
Z(2) to the generic level. In the previous section, this was accomplished for all 
of the fundamental binary operations but for the exception of division "/" . In 
this section, we complete this part of our research program by lifting the lopsided 
division defined in section III to the generic level. 

An immediate consequence of achieving his objective will be the creation of 
the Boolean factoring (BF) algorithm, which transforms the problem of integer 
factoring into the problem of solving a system of Boolean equations. This system of 
Boolean equations is nothing more than the generic remainder arising from generic 
lopsided division algorithm. 



Definition 11. Let u, v, w be generic integers. The first component-wise sym- 
metric function of u, v, w , written 

Component _Wise_o~i (u, v, w) 

is the generic integer whose i-th component is the first symmetric function of the 
i-th components of u, v, w , i.e., whose i-th component is 

ai (u, v,w) = Ui 4 Vi 4 Wi 

The second component-wise symmetric function of u, v, w, written 

Component _Wisejj2 {u, v, w) 

is the generic integer whose i-th component is the second symmetric function of the 
i-th components of u, v, w , i.e., whose i-th component is 

a 2 (ui,Vi,Wi) = (uiOVi) + (vi owi) + {wi om) 



Definition 12. Let u and v be two generic rational integers. Let 

u = v 
denote the following element of the free Boolean ring B < x > 



(u = v) = ]^[(1 4- Ui 4 Vi). 



i=0 



Remark 8. Please note that, since u and v are generic integers, almost all terms 
in the above product are 1 . 
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In the theorem below, " |_ J " and " [ ] " denote respectively the floor and ceiling 
functions 



[J:M — > Z []:M — > Z 

U i— ► max{fc 6 Z : k < u} " ' u h-» min {k E Z, : k > u} 



where R denotes the set of real numbers. 

Theorem 2 (Main). (The Boolean Factoring Algorithm.) Let N be a fixed positive 
rational integer, and let 

N = ... , 0, 0, JV a _i, N a _ 2 , ... , iVi, N 

denote its radix 2 representation. Let 

0=L(l + a)/2j 

and let x denote the positive odd generic rational integer 

x = . . . , 0, 0, xp-i, xp_ 2 , ■■■ , x 2 , x 1 , 1 

in G < x > . (Hence, x% — for i > /3.) Let 

c (0) = at 

borrows^ ' = 
and 

c( J+1 ) = CoTOponent-H^ise-CTi ( c^', borrows^ 1 ' , c\ f oS l x ) 

borrows^ +l > = Component -Wise-0~2 ( cS l >* , borrows^ 1 ', cf oS l x ) 

where c~ z '* denotes the component-wise complement of c^' and S denotes the unit 
left shift operator defined in section II of this paper. Let 

r=T(l + a)/2l 

Finally, let ek denote the following element of B < x > 

oo 

eu = TT (q + borrows] ' + 1 J = (cS k ^ = borrows^ 

i=0 

for k > . Then a has an odd rational integral factor of length /3—j (0 < j < (3 — 1) 
z/ and onfa/ z/ i/iere exists an instantiation $ suc/i i/iai 

$ (a^-p) = forl<p<j 

* fo-O+i)) = ! 

$(e r+ i) = 1 

Moreover, if there exists such an instantiation $ , i/ien iV is the product of the 
following two positive rational integers 

${x) 
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and 

N/m = « ( . . . , o, cEyji 1 ), <££?>, . . . , cl 1} , 4°)) 

Summary 1. Thus, given an arbitrary positive integer N , the BF algorithm, pro- 
duces a system of Boolean equations, namely 

c< r+1 ) = borrow s {r+1) , 

which we have expressed as the equality of two generic integers. Solving the above 
system of Boolean equations, is equivalent to finding a satisfying set of values for 
the Boolean variables Xi, X2, ■ ■ ■ , Xp—i (i.e., an instantiation ft ) for the following 
single Boolean function 

00 
er+i = Y\_ \ c i + borrows] + 1 

i=0 

i.e., finding a solution ft such that 

ft(e r +i) = 1 • 

Each such satisfying set of values (i.e., each instantiation ftj produces a rational 
integer divisor ft(x) of the rational integer N , i.e., 

ft (x) /N . 



5. Examples of the application of the BF algorithm 

Wc now give a number of examples of integer factorization using the BF algo- 
rithm. 

Example 5. Factoring 21 with the Boolean factoring algorithm. The radix 2 rep- 
resentation of 21 is: 

10101 
Thus, 

a = 5, /3 = 3, r = 3. 







c (2) 

1+X2 


Xl 


c (0) 
'0 

1 


a/x 


1 





x x x 2 


1 

x 2 




Xl 


1 
1 


| x 2 xi 1 = a 

c { 0) oS°x 




l + x 2 

Xl 

Xl 


Xl 
Xl 





c (i) 
borrows*- 1 ' 
c\ ' oS 1 x 


X\X 2 




X\X 2 
Xl 

X\ 4 XlX 2 


l + x 2 
l + x 2 





c (2) 

borrows^ 2 ' 
c 2 ' oS 2 x 


1 +X\X 2 
Xi + X X X2 








c (3) 

borrows^ 3 ' 



Hence, 



e-3, = 1 4- xix 2 4- xi 4- £1X2 4 1 = xi 
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$(x 2 ) = 1 

$(zi) = 1 
is a solution. Thus, 21 is a product of the rational integers: 

$(x 2 ,xi,l) = 111 (base2) = 7 (base 10) 

$(l + a;2,a;i,l) = 011(6ase2) = 3 (base 10) 



Example 6. Factoring 77 wii/i t/ie Boolean factoring algorithm. 

a = 7, (3 = 4, T = 4 



c (3) 

1 + X 3 



..(2) 



,W J°) 



1 4- a?2 xi 



1 



a/x 



1 








1 


1 





1 


| X 3 ,X 2 ,Xl,l = 








x 3 


x 2 


Xl 


1 


4 0) o5°x 




l + x 3 


l + x 2 


Xl 





C (D 











Xl 






borrows 1 ' 1 ' 






XiX 3 


x x x 2 


Xl 


Xl 




c\ ' oS 1 x 




XiX 3 


1 + X 3 


l + x 2 

+XlX 2 





c (2) 




xix 3 


XlX 2 X 3 


Xl 








borrows^ 




^3 + X 2 X 3 





x\ +x\x 2 


l + x 2 






c 2 oS 2 x 




X3 + £1X3 
4~X 2 X 3 


XlX 3 + XlX 2 X 3 


l + x 3 





c (3) 


£3 4 a;2a;3 
4xix 2 x 3 





X\ +X1X2X3 










borrows^ 3 ' 





£2 + £2213 


X\ \x\X 3 


l + x 3 








c 3 3) oS 3 x 



1 + £3 + X2X3 ; ; f 4l 

: x 2 +x 3 +xix 3 c w 

+xix 2 x 3 

X2 4 X2X3 xi + X1X3 borrows^ 4 ' 

Hence, 

e 4 = [(1 + x 3 4- x 2 x 3 + X1X2X3) 4- (x 2 4 x 2 x 3 ) 4- 1] o [(x 2 4- x 3 + x 2 x 3 ) 4- (xi + X1X3) 4 1] 
= (x 2 4- x 3 4- X1X2X3) o (xi 4 x 2 4 x 3 4 1) 



= Xl (x 2 + X3) 

Therefore, find an instantiation $ such that 

$ (x 3 ) = 1 and® (xi (x 2 4- x 3 )) = 1 

An algorithm for finding the solutions to Boolean equations of the above scarcely 
satisfiable kind can be found in Section IV of this paper. The solution $ to these 
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Boolean equations is: 



$ : x 2 



x 3 i — ► 1 
Thus, 77 is the product of the following positive rational integers: 

$ ( x 3 , x 2 , xi, 1 ) = 1011 {base 2) = 11 (base 10) 

and 

$ ( 1 4- x 3 , 1 + a; 2 , Xi, 1 ) = 0111 (base 2) = 7 (fease 10) 



Example 7. Factoring 95 wii/i i/ie Boolean factoring algorithm. 

a = 7, /3 = 4, T = 4 



.,(•'') 



„(2) 



.(1) 



+>) 









1+Xl 

+x 2 4 x 3 


1 + X2 


1+Xl 


1 


a/x 


1 





1 


1 


1 


1 


1 


| X 3 ,X2,Xl, l=x 








x 3 


X-2 


Xl 


1 


4 0) o5°x 




1 + 2:3 


1 + X2 


1+Xl 





c (i) 

















borrows^ 1 ' 






x 3 + x x x 3 


X 2 +XiX 2 





1+Xi 




c[' oS 1 x 






1 4- x 3 + xix 3 


1 + X2 
+x 3 4 xix 2 


1 + X2 







c (2) 







x 2 x 3 + XlX 2 X 3 










borrows^ 2 ' 




^3 + X 2 X 3 





Xi +X!X 2 


1 + 2:2 






c 2 S 2 x 




x 3 + X 2 X 3 


1 + 2:3 + 2:1X3 
+2:2X3 4- X1X2X3 


1+Xl 

+x 2 4 x 3 





c (3) 


X 3 + X 2 X 3 


x 2 x 3 + 2:12:2X3 


XxX 3 + XiX 2 X 3 










borrows^' 


X1X3 4 x 2 x 3 


xix 2 + 2:2X3 


X1X2 + X1X3 


+x 2 4 x 3 








4 3) o5 3 x 


1 + 2:3 


X 3 + XlX 2 


1 + X3 + X1X2 





c (4) 


+X1X3 


+^22;3 + 2:1X2X3 


+X1X3 + X2X3 








xix 2 + x 2 x 3 


xix 3 + xix 2 x 3 












borrows^' 



The leftmost expression in borrows^ 4 ' , i.e., X1X3 4 X1X2X3, is not shown in the 
above tableau because there is no room. 



Hence, 

e 4 = (0 4 X1X3 + xix 2 x 3 4 1) o (1 + x 3 4 X1X3 + xix 2 4- x 2 x 3 4 1) 
o (x 3 4- xix 2 4- x 2 x 3 4 X1X2X3 + X1X3 4- X1X2X3 4 1) 
o (1 4- x 3 4 xix 2 4 X1X3 + x 2 x 3 4-04-l)olol 
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Therefore, 

e 4 = (xix a + xix 2 x 3 + l)o (X3 4 xix 3 4 X\Xi 4 2:22:3) 

o (x 3 4 2:12:2 4 2:1X3 4 x 2 x 3 4 1) o (x 3 4 x x x 2 4 .2:1X3 4 x 2 x 3 ) 

Hence, 

e 4 = 
Thus, there is no factor of 95 of length 4 . 

So we set x 3 = , and continue. 











c (3) 
3 

1 + Xl + X2 


c (2) 

6 2 
1 + X2 


c (1) 
c i 

1 + Xi 


c (0) 

1 


a/x 




1 





1 


1 


1 


1 


1 


1 0,x 2 ,xi,l = 














2:2 


Xl 


1 


4 0) o5°x 




1 


1 + X 2 


1+Xl 





borrows^ 1 ' 











X2 + X1X2 





1+Xl 




c^Ks'x 









1 




1 + X 2 + XlX 2 


l + x 2 







borrows^ 2 ' 













Xl +X1X2 


l + x 2 






c 2 ' o<S 2 x 









1 




1 + Xl + X2 





c (3) 

borrows^ 3 ' 







XiX 2 


x x x 2 


1 + Xi + X 2 








4 3) o5 3 x 





1 

XiX 2 


X1X2 




1 + X1X2 





c (4) 

borrows^ 4 ' 





X2 4 X1X2 


Xl 4 X1X2 


1 4 XlX 2 










c 4 S 4 x 





1+X 2 
Xl + XlX 2 


Xl 













c (5) 

borrows*- 5 ' 



Therefore, 

e 5 = (1 + x 2 4 xi 4 xix 2 4 1) o (x\ 4 + 1) o 1 o 1 o ••• ol 

= (xi + x 2 4 xix 2 ) o (1 4- xi) = x 2 (1 4 Xl) 

Thus, a solution $ is: 

xi 1 — >0 

$ : x 2 1 — ► 1 

x 3 .— >• 
Hence, 95 is the product of: 

$ ( x 3 , x 2 , xi, 1 ) = 0101 (base 2) = 5 {base 10) 
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and 
$ ( 1 + xix 2 , 1 4- Xi + x 2 , 1 +x 2 , 1 + xi, 1 ) = 10011 {base 2) = 19 (base 10) 

6. The multiplicative Boolean factoring (MBF) algorithm 

The BF algorithm defined in the previous section is based on generic lopsided 
division. But there is no need to perform generic lopsided division each time 
one factors an integer. One need only pre-compute the generic inverse x~ l of a 
judiciously chosen odd generic integer x, and then use the pre-computed inverse 
x^ 1 over and over again to factor arbitrarily chosen integers. 

Let x denote the following particular generic integer 

and let x~ l be the corresponding generic inverse, which can be computed with 
generic lopsided division. 

Let x be pre-computed. Then for each chosen positive integer TV to be factored, 
one can find the appropriate system of Boolean equations to be solved to factor N 
simply by computing the generic product 

N -x- 1 . 

The resulting algorithm is called the Multiplicative Boolean factoring (MBF) 
algorithm. 

We leave the remaining details to the reader. 

7. A METHOD FOR SOLVING SCARCELY SATISFIABLE BOOLEAN EQUATIONS 

In this section, we outline a general framework for solving the system of Boolean 
equations produced by the BF and MBF algorithms. This framework was later used 
by Gamal Abdali to create a LISP implementation of the BF algorithm. Sumeet 
Bagde then extended these methods by using binary decision diagrams (BDDs) 2 
to create a Mathematica program that also implemented the BF algorithm. 

Both the LISP and Mathematica programs were used to factor many integers. 
The runtime statistics clearly indicated that the BF algorithm runs in exponential 
time, and hence, is not competitive with the best classical factoring algorithms. For 
an algebraic proof as to why this is the case, we refer the reader to the topdown 
overview given in the next section of this paper. 

The main theorem, found in section IV, reduces the task of factoring a fixed 
positive rational integer N to the task of finding a solution to a Boolean equation 
of the form 

e = 1 
where e 6 B < x >. Each solution of this equation corresponds to a divisor of N . 
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On the other hand, we are interested in factoring large integers which only have 
a small number of divisors. It follows that the corresponding equation 

e = 1 

has only a small number of solutions. We now use this idea to develop a method 
for solving Boolean equations that each have only a small number of solutions. 



Definition 13. Let e <E B (x). A solution of the Boolean equation 

e= 1 



is an instantiation $ such that 



$(e) = 1 



Definition 14. Let less than, written "< ", denote the linear ordering on the free 
basis elements 

X = {..., X 2 , Xi, x } 

defined by 

x % < Xj if i < j 

A term in B (x) is a finite product of distinct free basis elements which appear in 
the product from left-to-right in ascending order according to the relation "< " . The 
element 1 o/B (x) is represented as the term which is the empty product of free basis 
elements. Let "< " also denote the lexicographic linear ordering induced on the set 
of terms by the linear ordering "< " on x. (Please note that 1 is the smallest term.) 
A canonical expression is a sum of distinct terms which appear in the sum from 
left-to-right in ascending order according to the linear ordering "< " . (Please note 
that is represented by the empty sum of terms.) 



Observation. Every element of B (x) is uniquely representable as a canonical 
expression. 



Finally, we are in a position to define what is meant by a Boolean equation 
having only a small number of solutions. 



Definition 15. Let e <G B (x) . The Boolean equation 

e= 1 

is said to be scarcely satisfiable if the number of its solutions $ is a non-zero 
number which is less than the number of distinct free basis elements Xi appearing 
in the canonical expression for e . 
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Next, we observe that the solutions of 

e = 1 

are in 1-1 correspondence with minterms in the minterm expansion of e . It follows 
that a scarcely satisfiable Boolean equation 

e= 1 

is one in which there are only a small number of minterms appearing in the minterm 
expansion of e . Thus, we have the following proposition. 



Proposition 2. Let 

e= 1 

be a scarcely satisfiable Boolean equation. Then for all but a small number of free 
basis elements Xi appearing in the canonical expression for e either 

or 



Remark 9. Please note that 

1): Xie = ^=^ x*e = e =>• <&(#,) = for all solutions $ of e = 1 . 
2): x*e = <=? x t e = e => $(xi) = 1 for all solutions $ of e = 1 . 



This leads to the following: 



Algorithm for finding a solution $ to a scarcely satisfiable Boolean equa- 
tion 

e = 1 

Step 1: For each free basis element Xi not appearing in the canonical expres- 
sion for e, set $(xi) arbitrarily equal to or 1 . 
Step 2: For each free basis element Xi such that 

x*e = 
set 

*(a*) = 1 
Step 3: For each free basis element Xi such that 

x^e = 

set 
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Step 4: Let /i denote the number of free basis elements not determined in 
Steps 1 through 4. Exhaustively try each of the possible 2 P assignments 
of $ for these basis elements. Since e is scarcely satisfiable, the number of 
possibilities 2 M is small. 



8. A TOPDOWN OVERVIEW: THE " BIG PICTURE" 

After the careful microscopic analysis of arithmetic complexity given in the pre- 
vious sections of this paper, the "big picture" emerges. We now step back, and 
take a discerning macroscopic look at what has been found. 

We begin by defining two rings B® and Z®, the former of characteristic 2, the 
latter of characteristic 0. 

Construction of the first ring: 

Let B (x) be the free Boolean ring on the set 

g= {x ,xi,...,x„_i} 

of n symbols. Since the ring B (x) is both semisimple and a principle ideal domain, 
it decomposes into the direct sum 



2™-l 2 n -l 



'(i>=0W^0F 2 



a=0 a=0 

of principal, minimal ideals, where the ideal generators m a , called minterms, form 
a complete set of orthogonal idempotents. Consequently, each element e G B (x) 
can be uniquely written in the form 

2 n -l 
C > C a 7Tl a , 

a=Q 

where each coefficient c a is an element of the finite field of two elements F2 = {0, 1}. 

We now define the ring B® of concurrent Boolean functions to be the 
Boolean ring formed by the ring direct sum 

00 
B© = B ( g ) 

j=o 
with diagonal multiplication. 

Construction of the second ring: 

Let Z be the ring of rational integers. We define the ring Z® of concurrent 
integers as the direct sum 

2 n -l 

z® = z® 2 " = z 

Q = 
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with multiplication defined diagonally. Thus each element of Z® can be uniquely 
written in the form 

2 n -l 8°-l" 

(37 o« = © / ."jcfZ ? 



«=o i=0 



where L eZ, and where 



3=0 

is the binary expansion of the integer b a . 

The identification: 

We now have two rings, B® of characteristic 2, and Z® of characteristic 0. Our 
next step is to identify these two rings as sets via the bijection defined by 



2™-l °° , T ) 00 2T * _1 

where 6j Q on the left is an integer or 1 in Z, and on the right an element or 1 
of the finite field of two elements F2. The result of this identification is called the 
ring of generic integers, and denoted by G (x). This object G (x) is a set with 
two distinct ring structure, i.e., a bi-ring G (x) ,+,-,+, o. The bi-ring G(#) is 
sinndtancously of characteristic and of characteristic 2. 

Remark 10. Please take care to note that both T and its inverse T" 1 are bisections 
of sets, and not ring isomorphisms. 



In like manner, the bi-ring of generic dyadic integers G(2) \x) can be defined as 
follows: 

Let Z( 2 ) denote the ring of dyadic integers. We define the (characteristic 0) 
ring Z,*-, of concurrent dyadic integers as the direct product 

2™-l 



Z (2) = X ^ (2 ) 



with diagonal multiplication. 



In turn, the (characteristic 2) dyadic ring B,*-, of concurrent Boolean func- 
tions is defined as the direct product 



^ 3=0 



x M(£) 



with diagonal multiplication. 
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The definition of the bijection T( 2 ), i.e., 

Z x 



"(2) <— ^ ^(2) ' 

T (2) 

is similar to that of T, and is left to the reader. 



Finally, the bi-ring of generic dyadic integers G( 2 ) (x) , +, -, +,o is defined 
by using the above bijection T( 2 ) to identify B f x 2 s and Z, x ., as sets. 

One immediate consequence of the above "big picture" is that our use of the 
phrase "algebraic parallel processing" is not unwarranted. For each arithmetic 
operation in G (x) ,+, ■ (in G( 2 ) (x) , +, •) is the same as 2™ — 1 arithmetic operations 
inG(|},+,« (inG( 2 )(|),+,o). 

It also follows that we have achieved one of the research objectives mentioned 
in the introduction, namely, the development of a procedure for decomposing 
arithmetic operations into fundamental Boolean operations. In other words, we 
have developed a procedure for decomposing the arithmetic operations of the ring 
G (x) , +, • (of the ring G( 2 ) (x) , +, •) into the elementary operations of the ring 
<G (£),+,<> (of the ring G (2) (g) , +,o). 



In closing this section, we give below a summary of the Boolean decompositions 
of the elementary arithmetic operations for addition " +" , negation " — " , subtraction 
"— ", and lopsided division "/". The Boolean decomposition of multiplication "•" 
can be found in the appendix. Please note that all of the operations +, — , / can be 
viewed as fixed points of either the function A or the function D. The definitions 
of the functions A and D can be found below. 

Proposition 3. Let A and P be the functions defined by 

A : G (2 ) (g) x G (2 ) (g) — ► G( 2 ) (g) x G (2) (g) P : G (2) (g) x G (2) (g) — > G (2) (g) 

(u,v) i — > (a + b,S (aob)) '" (u,v) i — > u 

Then 
Addition "+" 

a + b = P lim A k (a, b) , 

k— >oo 

and hence, (a + 6, 0) is a fixed point of A. 
Negation "-" 

-a = P lim A k (a*,l) , 

fc->oo 

and hence, (—a, 0) is a fixed point of the function A. 
Subtraction " — " 

a-b = P lim A k (a + b* + 1, S (a o b* + a + bo)) , 

k— ^OO 

and hence, (a — 6, 0) is a fixed point of the function A. 
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Let <i\ and <ji are the component-wise symmetric functions defined in section 
IV. Let D and P' be the functions defined by 

D : G( 2 ) (g) 3 x Z — ► G (2 ) (^) 3 x Z 

(u, V,W,£) I > (<7l (ll, V ,UgOw) ,(72 {U*,V, Uf o w) , iS (w) ,£ + 1) 

and 

i":G(2)(|) 3 xZ — > G (2 )(£> 



(u, v, w,£) 



Then 

Lopsided Division "/" 

a/b = P' lim D k (a, 0, 6, 0) , 

k— »oo 

and hence, (a/b, 0,0, oo) is a /ixed poinf o/ D, where a and b are odd positive 
generic dyadic integers. 

Question: Is it possible to remove the characteristic counter £ i — ^ £ + 1 /rom 
the above lopsided division algorithm? 



9. Conclusions and open questions 

The BF and MBF algorithms described in this paper are far from competitive 
with current classical factoring algorithms. It is hoped that the two Boolean factor- 
ing algorithms and the generic framework described within this paper will become 
natural stepping stones for creating faster and more competitive algorithms, and 
perhaps lead to a new highly competitive quantum integer factorization algorithm. 

Before closing this section, a word should be said about the natural question of 
what is the relationship between the satisfiability problem SAT and the BF and 
MBF algorithms. SAT is NP-complete. Is the task of solving the class of systems 
of Boolean equations produced by the BF and MBF algorithms (when reduced to a 
decision problem) NP-complete? Is it #P-hard? The answers to these questions 
are not known at this time. 

Certainly the BF and MBF algorithms culminate in satisfiability problems. But 
not all satisfiability problems are NP-complete. Not all are #P hard. For example, 
2-SAT is not NP-complete, but 3-SAT is. 

It should be noted that the execution of every algorithm on a digital computer 
is ultimately reduced by a compiler/assembler to the execution of a Boolean al- 
gorithm. This was one of the primary motivating factors for writing this paper. 
Certainly, it is clear that not every Boolean algorithm executed on a digital com- 
puter corresponds to an NP-complete or a #P hard problem. 
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10. Appendix. Generic integer multiplication defined in terms of 
fundamental boolean operations 

In section II, generic integer multiplication "•" was defined in terms of the sec- 
ondary operation of generic integer addition "+" . Sketched below is a definition of 
generic integer multiplication "•" in terms of more fundamental Boolean operations. 



Definition 16. Let 

a = . . . , a 2 , Oi, a 
be a non-negative (i.e., positive or zero) generic rational integer. Then the i-th 
symmetric function 

<7»(a) 
of a is defined as 

a i{ a ) = E ^f 1 ) ° a j( 2 ) ° • ' • ° a 0(i) 

j(l)<j(2)< ... <j(i) 

where 

E 

j(l)<j(2)< ... <j(i) 

denotes a sum with respect to the operation "+ " in B < x > over the indices 
j(l), j(2), ... , j(i) subject to the condition 

j(l) < j(2) < ... < 3(1) . 

This function is well-defined since 

a k = 

for all but finitely many k. 



Definition 17. Let 



a( 2 \ aW, o<°> 



denote an infinite sequence of generic dyadic integers such that 

lim a w = 

i— 7-oc 

Then, since the limit of the sequence is zero, the j-th components 

(2) (1) (0) 

of the above elements of the sequence form a generic rational integer. The component- 
wise i-symmetric function 

Component -Wise-0~i l...,ar',ar',ar'\ 

of the sequence 

... ,a( 2 >, a«, o<°> 
is defined as the generic dyadic integer whose j-th component is 

a . ( J 2 ) J 1 ) J°) N 
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Observation. Let 



a<- 2 \ oW, a (0) 



be an arbitrary sequence of generic dyadic integers, and let "XJ" denote a summa- 
tion with respect to the operation "+" . Then 

1): X^o a ^ 1S convergent, hence exists, if and only if lim^oc a^ = 0. 

2): lim^oo S 1 ^^ = 0, and hence, X^o S 1 * 1 i s convergent and well-defined. 



Proposition 4. Let 



c< 2 \ c« c(°) 



be a sequence of generic dyadic integers. Define c™> recursively as follows: 
c (»,o) = c {i) 

c (*J+i) = ^ (c(°J), ScW), SV a ^, ... 5P C ^>, ...) 
Then lizn^oo c^' 3 ' exists and is given by 

if i>0 



lim c (iJ) = 

i V 



1 E^l ^ p c^«) forallq>0 if i = 



Corollary 3. Lei a and & be two generic dyadic integers. Define the generic dyadic 
integer 

c W = b % o a 

Then, by using the construction given in the above proposition, the generic product 
of a and b is given by 

a-b= lim c (0j) 

It is amusing and insightful to note that the above Boolean decomposition is 
based on the repeated application of the following well known combinatorial for- 
mula which acts as a bridge between characteristic and characteristic 2 algebraic 
structure, namely: 

Theorem 3. Let s = s m _is m _2 • • • S2S1S0 be a binary string of length m, and let 
a k (2/0,2/1,2/2, ■ • -J/m-i) be the k-th (0 < k < m) elementary symmetric function in 
the free Boolean ring B (2/0, j/i, J/2, • • • Vm—i)- Then the Hamming weight Wt (s) of 
the string s is given by the following formula 

LlgmJ-l 

wt (s) = y, a * ( s ) • 2j > 

3=0 

where the symmetric function is first evaluated in the field of two elements ¥2 , and 
then interpreted as the integer or 1 in Z.[12j 
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Thus, the cr 2 j 's are the j'-th order carries in the multiplication algorithm. This 
is now made explicit in the following topdown formulation of the multiplication 
algorithm. 



Proposition 5. Let Mat c 



M = (m l0 ) 



(xj) be the set of all Boolean matrices of the form 
( ■■■ m 03 m 02 m i m 00 \ 



TO13 


m\i 


mn 





m 23 


m 22 








m 33 












V 



/ 



where rriij G B (x) and rriij = for i > j . Let fi be the map defined by 



n : Matoo (B (g)) 



M = (•• -,73,72,71)70) 



!->• 



Mat oo (B (^)) 

02° (73) 0-20 (72) cr 2 o (71) 

0-21 (72) cr 2 i (71) cr 2 i (70) 

0"22 (7l) °22 (7o) 

CT 2 3 (70) 



cr 2 » (7o) \ 







V 



where jj denotes the j-th column of M , for < j < 00. 
Let a and b be positive generic dyadic integers. Then 



where 



Mn = 



a-b = P lim (T(M ) 

k — >oo 



a 3 bo a 2 b aib a b \ 

a 2 b\ a\bi aobi 

ai6 2 a b 2 

a b 3 



V 



/ 



and where P projects each matrix of Mat^ (B (x)) onto its first row. 

Remark 11. Please note that if the columns of the matrices of Mat ^ (B (a;)) are 
written in reverse order, then Matoo (B (2)) becomes a ring of upper triangular 
matrices. 



Remark 12. Please note that each entry a 2 i (7^) is well defined because each col- 
umn 7j is a positive generic integer. 



Q(M) 



Remark 13. The sub-Boolean ring ofM(x) of all elementary symmetric Boolean 
functions is a free a free Boolean ring with free basis o~i 1 o~ 2l o 2 i , . . . , o~ 2 [i g n \ . Hence, 
as vector spaces, diniF 2 (B (a 2 *)) = [lgdimF 2 (B (a;)) J • Consequently, tt k (Mo) 
converges exponentially fast to a matrix with only two non-zero rows. 
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